Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tG9LNPF_ZGjT5UH24xj-4ANol0w.roa
File: tG9LNPF_ZGjT5UH24xj-4ANol0w.roa (raw, json)
Hash identifier: M7UbBD5GubHo1YhxR1ovWuWhislCraS9osgv7J77+Hs=
Subject key identifier: B4:6F:4B:34:F1:7F:64:68:D3:E5:41:F6:E3:18:FE:E0:03:68:97:4C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 91A79624
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tG9LNPF_ZGjT5UH24xj-4ANol0w.roa
Signing time: Sat 02 Jul 2022 04:12:25 +0000
ROA not before: Sat 02 Jul 2022 04:12:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2443679268 (0x91a79624)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 2 04:12:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b46f4b34f17f6468d3e541f6e318fee00368974c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d4:0b:b5:a5:1e:c9:9d:3a:d4:14:1c:e5:f0:
b0:a0:69:a4:14:ae:ab:7e:d9:5d:d2:82:13:0d:52:
fc:fe:64:3d:c6:47:53:61:9d:93:e3:cc:6f:14:7c:
dc:24:06:f1:9b:e5:4c:8b:a5:5c:87:ff:5c:7f:2c:
25:e5:17:1e:50:f4:5d:ad:8a:85:4d:5a:96:00:5a:
ab:ce:8e:f4:da:6b:41:c5:bd:0b:ba:e5:63:bd:51:
5b:96:f6:bc:1a:f6:61:b1:51:37:ca:4e:3a:a5:f6:
ac:bc:55:7b:54:68:8b:9b:0d:43:e4:37:49:a3:61:
31:83:29:08:eb:15:ce:fd:f2:83:2a:10:e6:89:87:
f8:fc:b1:78:fc:3b:51:6d:66:4e:6d:51:f6:92:b5:
7c:ef:f8:e3:44:34:95:e7:24:1f:19:79:82:22:0e:
34:61:18:03:f2:ca:93:03:f8:67:de:95:ba:6a:9d:
25:a0:95:4c:97:e1:cb:1e:3d:0b:f4:4e:d3:c7:d5:
78:a5:52:0f:74:c2:3a:d5:11:1c:3c:bc:6e:55:a0:
11:65:78:df:62:4b:e4:fb:96:23:6a:97:ea:91:01:
1f:55:ac:e7:bf:2e:0b:6a:50:ec:c1:d6:35:27:26:
5a:44:6b:63:56:da:de:3f:77:4c:61:31:15:8e:54:
63:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6F:4B:34:F1:7F:64:68:D3:E5:41:F6:E3:18:FE:E0:03:68:97:4C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tG9LNPF_ZGjT5UH24xj-4ANol0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:77:f7:43:81:6e:fe:3e:ee:58:0a:62:14:8e:00:f4:0f:b8:
a1:df:39:fc:85:f3:02:a2:3c:de:6c:18:80:aa:f3:db:08:73:
30:95:82:d7:2e:20:67:f9:b0:70:98:a4:d6:c1:4c:0a:0c:d1:
47:b5:16:cc:b6:8b:40:5a:03:0e:b2:c3:25:ba:e9:a6:70:c3:
2c:d1:97:4a:20:f0:69:41:2e:ab:e5:e0:44:ed:ed:73:53:6d:
07:08:0f:84:e0:a1:a8:86:ef:0e:22:2e:23:5b:58:c4:18:fd:
fe:59:13:e2:d1:80:59:b3:00:72:63:c5:9d:eb:41:9b:de:42:
c9:cf:8e:ec:2b:38:99:bf:5a:bf:30:7d:0c:cf:a4:6f:6f:e5:
a0:14:d0:25:43:03:6a:c8:a6:e8:01:64:c2:cd:cf:4a:e1:06:
9a:38:e9:f6:a3:2f:f7:a1:df:fd:97:e3:54:71:2a:e0:2f:02:
ce:af:05:2e:22:ad:78:7d:a2:fc:28:49:69:a3:14:97:53:ba:
c2:8b:2c:9e:0a:c5:ee:8c:81:5a:d8:63:3c:68:2f:1a:5d:15:
cf:29:a4:dc:01:ce:57:f9:86:f3:a4:58:7c:01:a9:cc:a6:c1:
24:a7:45:fa:07:0f:66:cb:80:50:d6:cb:4a:78:af:be:ca:58:
e2:02:f2:51
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAJGnliQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA3
MDIwNDEyMjVaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGI0NmY0YjM0ZjE3
ZjY0NjhkM2U1NDFmNmUzMThmZWUwMDM2ODk3NGMwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCn1Au1pR7JnTrUFBzl8LCgaaQUrqt+2V3SghMNUvz+ZD3G
R1NhnZPjzG8UfNwkBvGb5UyLpVyH/1x/LCXlFx5Q9F2tioVNWpYAWqvOjvTaa0HF
vQu65WO9UVuW9rwa9mGxUTfKTjql9qy8VXtUaIubDUPkN0mjYTGDKQjrFc798oMq
EOaJh/j8sXj8O1FtZk5tUfaStXzv+ONENJXnJB8ZeYIiDjRhGAPyypMD+Gfelbpq
nSWglUyX4csePQv0TtPH1XilUg90wjrVERw8vG5VoBFleN9iS+T7liNql+qRAR9V
rOe/LgtqUOzB1jUnJlpEa2NW2t4/d0xhMRWOVGN/AgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUtG9LNPF/ZGjT5UH24xj+4ANol0wwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS90RzlMTlBGX1pHalQ1VUgyNHhqLTRBTm9sMHcucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAlnf3Q4Fu/j7uWApiFI4A9A+4od85/IXzAqI8
3mwYgKrz2whzMJWC1y4gZ/mwcJik1sFMCgzRR7UWzLaLQFoDDrLDJbrppnDDLNGX
SiDwaUEuq+XgRO3tc1NtBwgPhOChqIbvDiIuI1tYxBj9/lkT4tGAWbMAcmPFnetB
m95Cyc+O7Cs4mb9avzB9DM+kb2/loBTQJUMDasim6AFkws3PSuEGmjjp9qMv96Hf
/ZfjVHEq4C8Czq8FLiKteH2i/ChJaaMUl1O6wossngrF7oyBWthjPGgvGl0Vzymk
3AHOV/mG86RYfAGpzKbBJKdF+gcPZsuAUNbLSnivvspY4gLyUQ==
-----END CERTIFICATE-----
Generated at Fri May 2 20:36:44 2025 by rpki-client